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\ WHAT IS CLAIMED IS: 

\. An encryption apparatus, comprising: 
means for encrypting a data body; and 
means for transmitting transmission data to 
a receiver\ the transmission data including: 
the encrypted data body; 

sender 'sXkey recovery data obtained by encrypting 
recovery information for recovering a key for 
decrypting the encrypted data body to allow a key 
recovery agent registered by a sender to decrypt 
the recovery information; and 

receiver's key recovery data obtained by 
encrypting the recovery \information for recovering 
the key for decrypting th^ encrypted data body to allow 
a key recovery agent regist>ered by a receiver to 
decrypt the recovery information . 

2. An encryption apparatias according to claim 1, 
wherein the key recovery agent comprises in a plural 
form and when the sender or receiver registers 

a plurality of key recovery agents A the recovery 
information contained in the sender * k or receiver's key 
recovery data is a set of parts of a decryption key for 
decrypting the encrypted data body, andVthe parts of 
the decryption key are so encrypted as tA be decrypted 
by different key recovery agents. \ 

3 . A cryptographic communication system 
comprising: \ 
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^an encryption apparatus, comprising: 
^eans for encrypting a data body; and 
sans for transmitting transmission data to 
a receiver, the transmission data including: 
theXencrypted data body; 

sender • s key recovery data obtained by encrypting 
recovery information for recovering a key for 
decrypting tke encrypted data body to allow a key 
recovery agent^ registered by a sender to decrypt 
the recovery information; and 

receiver ' s Vey recovery data obtained by 
encrypting the recovery information for recovering 
the key for decryptiing the encrypted data body to 
allow a key recovery^ agent registered by a receiver 
to decrypt the recoveVy information; and 

a plurality of key recovery agents each, when 
registered by sender orXreceiver, capable of decrypting 
sender's or receiver's kdry comprised of a plurality of 
key pieces obtained by diva.ding the key into pieces* 

4 • A cryptographic cojmunication system according 
to claim 3, further comprisi)ng: 

a certificate authority \apparatus arranged 
to allow accepting registration of at least key 
recovery agent and receivers arid provide information 
representing correspondence between each registered 
receiver and a key recovery agent and information 
representing that said encryptiom apparatus encrypts 
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the recovery information so as to allow the key 
recovery agent to decrypt the recovery information. 

\ 5. A cryptographic communication system according 
to cuaim 3, further comprising: 

in approver apparatus for approving a requester 
for kev recovery agent registration approval and 
approving an authorized third party, who requests an 
approval tor decrypting the sender's or receiver's key 
recovery data, to decrypt the sender's or receiver's 
key recovery, data; and 

wherein Nsaid key decrypter apparatus decrypts and 
sends back the \ sender's or receiver's key recovery data 
only when a request is made by a party approved by 
an approver . 

6. A cryptographic communication system according 
to claim 4, further \comprising : 

an approver apparatus for approving a requester 
for key recovery agentX registration approval and 
approving an authorizedX third party, who requests an 
approval for decrypting the sender's or receiver *s key 
recovery data, to decrypt\the sender's or receiver's 
key recovery data; and 

wherein said key decrybter apparatus decrypts and 
sends back the sender's or receiver's key recovery data 
only when a request is made by a party approved by 
an approver. 

7. A key recovery system Comprising: 
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m encryption apparatus using key information 
for encrypting or decrypting data and storing, 
independently of key information, recovery information 
for recovering key information in an encrypted state so 
as to be decrypted by a key recovery agent registered 
by said encz^yption apparatus; 

an apprdver -apparatus for approving a party who 
requests a registration approval for the key recovery 
agent and giving an authorized party who requests 
an approval for oecrypting the encrypted recovery 
information an approval for decrypting the encrypted 
recovery information; and 

a key decrypterX apparatus for decrypting and 
sending back the encrypted recovery information only 
when a decryption request is made by a party approved 
by an approver, 

8. A computer-readable storage medium storing 
a program for controlling an encryption apparatus for 
encrypting a data body to make an encrypted data body 
contain in transmission data\and transmitting 
the transmission data to a receiver, said program 
comprising means for containing\ in the transmission 
data; 

sender's key recovery data obtained by encrypting 
recovery information for recoverin\g a key for 
decrypting the encrypted data body \to allow a key 
recovery agent registered by a sender to decrypt 
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tR^ recovery information; and 

jceiver's key recovery data obtained by 
encryptingv^e recovery information for recovering 
the key for deci5xpting the encrypted data body to 
allow a key recoveryVagent registered by a receiver 
to decrypt the recovery rnformation. 



